Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File:                     tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier:          cVQoi+NMtDb1tnOQ0i9xsaAjvDbcpdd3Xf+Gh1HHBgw=
Subject key identifier:   35:81:DA:61:AA:96:5C:09:8F:02:C7:94:2A:A5:DE:70:07:57:4A:57
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       018F9014EA5EBFB32F77664AC4DE3906F428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number:          08D4
Signing time:             Sun 19 May 2024 09:00:40 +0000
Manifest this update:     Sun 19 May 2024 09:00:40 +0000
Manifest next update:     Mon 20 May 2024 09:00:40 +0000
Files and hashes:         1: aCGqjWrMIqz-20JufiNsVZijMv8.roa (hash: BzurtR3v4cP5Z+R/T1jeCeKAlwmGEsf0SSAIWYdylUo=)
                          2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: PmKkNSIN0YONFDDyACLj5KF0HAb0DTGsN8pgnywhSqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:14:ea:5e:bf:b3:2f:77:66:4a:c4:de:39:06:f4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: May 19 09:00:40 2024 GMT
            Not After : May 20 09:00:40 2024 GMT
        Subject: CN=3581da61aa965c098f02c7942aa5de7007574a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:04:0f:09:94:ee:70:5b:69:1b:2d:34:bc:
                    18:c5:d0:fb:4a:60:19:b3:9f:c9:32:1b:d8:52:af:
                    e9:ca:a8:d5:da:f2:39:f6:0c:34:85:98:f5:b5:92:
                    6e:61:af:ed:0c:b8:20:54:13:a9:83:63:13:fa:92:
                    fa:9e:99:d2:52:7e:3e:51:9a:89:20:e6:0e:ea:45:
                    06:38:86:4f:49:a7:de:2e:a4:88:a8:2d:7c:dd:b2:
                    ad:18:1a:a7:e9:40:0d:74:24:7f:1e:16:1f:56:1a:
                    01:92:2e:f2:a3:fa:f2:3e:ff:58:ed:a4:d2:74:0b:
                    0c:df:32:6d:b0:1c:b2:41:88:07:19:84:bd:3a:01:
                    22:4a:8d:02:2d:79:36:7c:c0:9c:61:99:98:10:c7:
                    43:f3:80:3e:e1:a0:29:b8:ef:f2:55:b9:48:d6:25:
                    a0:65:72:ca:c8:cd:6e:9f:59:75:29:0f:91:2f:91:
                    6e:a3:1e:f2:36:72:46:40:b3:1e:a7:01:ce:2e:57:
                    28:3c:72:c9:89:32:47:00:bc:34:9f:9d:14:43:12:
                    a3:00:4a:80:4d:ae:a0:17:18:e9:20:d8:75:1d:82:
                    a0:bc:ad:bb:ea:e9:8c:92:c4:b7:39:de:fd:44:68:
                    30:69:12:be:e3:d9:4b:c2:3d:f0:ef:08:3f:9b:05:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:81:DA:61:AA:96:5C:09:8F:02:C7:94:2A:A5:DE:70:07:57:4A:57
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:b2:c9:6d:8a:98:1a:f0:c2:39:98:46:bb:95:7e:8f:91:
         61:e7:83:d7:18:7a:2b:32:fc:6e:e9:b7:0e:9d:90:19:37:0e:
         ac:0f:5b:a4:f9:d5:76:da:a8:28:ac:21:ac:ed:61:8c:1b:17:
         36:ed:09:19:55:b5:da:c3:16:87:4f:e2:66:18:d8:d6:a9:62:
         36:a9:a0:c4:2d:7f:e9:07:26:64:35:8a:05:66:6f:52:9d:86:
         53:62:61:ff:90:ff:6e:b3:42:3e:6f:e7:5d:cc:1f:36:aa:af:
         3b:3f:30:48:15:a9:4e:79:e5:67:75:e2:b3:ac:81:dd:8a:09:
         c2:65:88:d4:22:b7:2b:08:4c:f6:bf:98:df:5d:4d:b5:e2:f4:
         cb:60:a6:4c:e9:5b:aa:86:62:68:46:b4:7c:d5:d1:e3:c0:90:
         3e:b5:74:aa:e2:4a:b4:41:e2:15:b6:6b:c8:4f:65:24:67:54:
         07:ab:66:3c:e8:4b:28:1d:0d:46:f0:f4:b9:3d:89:af:20:a1:
         51:37:95:1a:69:08:91:ac:bc:f7:8a:57:72:a0:de:6a:eb:f0:
         fb:7d:8c:d2:af:b1:f5:60:b4:48:18:7d:71:18:a0:1d:fb:a2:
         34:aa:30:c9:fb:44:f7:42:48:96:b5:3c:ab:59:16:36:d2:98:
         aa:6c:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:40:21 2024 by rpki-client on console-fra.rpki-client.org